fixup! fixup! fixup! Add CI that builds and runs every example against wolfSSL master and stable

Author: aidangarske

.github/examples-manifest.yml

@@ -398,9 +398,10 @@ examples:
       # `grep /proc/cpuinfo || exit 0` guard would turn "never tested here" into a
       # green tick, which is worse than a loud crash. Hosted runners are Xeon or
       # EPYC and have had RDSEED since Broadwell/Zen.
-      # No expect: the example prints nothing; `return 0` vs `return 1` is its
-      # whole result.
       - exec: [./aesgcm-rdseed]
+        # the last line it prints, and only reached once the GCM round-trip
+        # compared equal
+        expect: "Decrypted"
 
   - id: crypto-ascon
     path: crypto/ascon
@@ -1412,7 +1413,15 @@ examples:
     tier: cross
     profile: default
     mode: build-only
+    # java.yml builds wolfSSL with JNI, builds wolfssljni on top and javac's
+    # URLClient against wolfssl-jsse.jar -- so `build: none` here means the
+    # harness does not build it, not that nothing does.
     build: none
+    reason: >-
+      URLClient fetches a real URL over the public internet (the README's own
+      invocation is -h https://www.google.com with example-keystores/external.jks),
+      so running it in CI would test GitHub's network, not wolfJSSE. Compiling it
+      against the jar is the honest ceiling. Same call as ocsp-nonblock.
 
   - id: kernel-bsdkm
     path: kernel/bsdkm